The macOS Mail app has security holes related to the Siri virtual assistant application

The snippets.db file in the database stores information from Mail and other applications that are storing unencrypted email content.

A flaw within Apple's Mail application, known for security, was accidentally discovered by security researcher Bob Gendler while trying to figure out how macOS and Siri suggested information to users.

Specifically, Gendler found snippets.db in the database that stores information from Mail and other apps that Siri uses to recommend information to users who are storing unencrypted email content. .

The macOS Mail app has security holes related to the Siri virtual assistant application Picture 1The macOS Mail app has security holes related to the Siri virtual assistant application Picture 1
The security hole in the Mail app on macOS is caused by the virtual assistant Siri.

This error is quite similar to iOS and macOS Mail application errors because the HTML protocol failed last year, so that the standard Mail application's encrypted email can be read as a plaintext.

The Mail app bug this time affected people using Macs from Siera to Catalina versions.

The macOS Mail app has security holes related to the Siri virtual assistant application Picture 2The macOS Mail app has security holes related to the Siri virtual assistant application Picture 2
Image showing the vulnerability exists in the Mail application on Bob Gendler's macOS.

Gendler announced the discovery of a flaw in the Mail app for Apple. The security researcher also instructs users to take temporary security measures for their email inboxes while waiting for updates to patch vulnerabilities from the technology giant. Specifically, users access System Preferences -> click on Siri -> click on Siri's Suggestions & Privacy -> select Mail and turn off Learn from this app.

  1. Microsoft continued to issue warnings about Windows BlueKeep attacks, asking users to install the patch immediately
  2. Warning: Google Chrome is experiencing serious security errors, patch updates right away
  3. Detecting 2 extremely serious security holes in rConfig, no patch yet
4 ★ | 2 Vote